Rework SOC Sourcing and Secrets Strategy for AI-era Operations

What happened

Fortinet launched FortiSOC, a cloud-delivered SOC platform that bundles SIEM, orchestration, threat intelligence and agentic AI into one managed service. The product is offered as a single SaaS option while Fortinet's legacy tools remain available, making unified-SOC procurement a live choice for buyers. Watch whether customers migrate existing toolchains into FortiSOC or persist with stitched best‑of‑breed stacks and how exit/API rights are handled

Why the category manager should care

Treat FortiSOC as a viable single-vendor SOC option that reduces tool sprawl but increases dependency on vendor automation, APIs and runbooks

Key facts

• Cloud-delivered SOC combining SIEM, SOAR, threat intelligence and case management
• Includes agentic AI for investigation and suggested or automated responses
• Positioned as a single cloud service while legacy products remain available

What happened

Cohesity launched Maestro to extend backup, telemetry and recovery orchestration into AI platforms using the Model Context Protocol (MCP). Maestro exposes recovery and autonomous agent capabilities inside AI workflows so restores and threat hunting can be triggered from within the AI environment. Buyers should require validated restore tests in each AI workflow and confirm API SLAs with Cohesity or integrators to avoid restore inconsistencies

Why the category manager should care

Treat backup vendors that integrate with AI tools as runtime partners and require validated restore tests per AI workflow

Key facts

• Integrates via Model Context Protocol (MCP) with external AI systems
• Exposes recovery, telemetry and autonomous agents inside AI workflows
• Designed to let customers trigger restores and threat hunting from AI interfaces

What happened

Delinea and Cyera announced an integration that maps privileged identities to sensitive-data exposure so security teams can rank which accounts pose the greatest access risk. The integration feeds Cyera's exposure labels into Delinea's identity platform to update privileged access risk scoring and guide reviews. Watch for operational implications around joint remediation workflows and whether vendors offer coordinated support SLAs and local presence for escalation

Why the category manager should care

Use the integration to prioritise high-risk accounts, but require joint playbooks and SLAs for remediation steps that cross both vendors

Key facts

• Integration connects privileged identity platform with data security posture management
• Feeds exposure labels into identity system to update privileged access risk scoring
• Creates a single view of which identities (human, machine, AI) can reach sensitive data

What happened

Keeper launched Universal Secrets Sync for KeeperPAM to automatically push rotated credentials into AWS Secrets Manager, Azure Key Vault and Google Cloud Secret Manager. The feature aims to eliminate credential drift that causes access failures and slower incident response and can be enabled by current users without a separate purchase. Buyers should validate sync failure modes, rollback procedures and audit trails before enabling this across production systems

Why the category manager should care

Use secrets sync to reduce operational drift, but require documented failure-mode handling, rollback and audit trails in procurement terms

Key facts

• Universal Secrets Sync pushes rotated credentials into AWS, Azure and Google Cloud secret stores
• Designed to prevent credential drift between PAM and live applications
• Can be enabled by current KeeperPAM users without buying a separate product